Julien Vehent:
> Also for this last query, it looks like 65% of the IPs cannot be linked
> to a country (XX = unknown). I'm not very familiar with the way geo-ip
> databases gather their data, is that normal numbers for zombies ?
This is not my experience.
A few times a year I do a one-time purchase from a high-quality
geopIP provider, to prepare nice spam-by-time-of-day and pregreet-delay
charts by country for an upcoming Postfix presentation.
With these databases I seem to have no problems identifying countries,
as long as I use a current database snapshot.
Wietse
